Cisco Secure Firewall ASA & FTD - Authentication Bypass

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should...

CVE-2026-50206 VPN Command Injection Vulnerability

Incoming VPN network profile settings fail to process special characters safely, enabling command injection via malicious config files...

Exploit for Reliance on Cookies without Validation and Integrity Checking in Paloaltonetworks Pan-Os

🚨 CVE-2026-0257 - Authentication Bypass Vulnerabilities...

Cisco Adaptive Security Appliance (ASA) Software VPN DoS Vulnerabilities (cisco-sa-asaftd-vpn-m9sx6MbC)

According to its self-reported version, Cisco ASA Software is affected by multiple vulnerabilities. - A vulnerability in the Lua interpreter of the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD...

Cisco Firepower Threat Defense (FTD) Software VPN DoS (cisco-sa-asaftd-vpn-dos-SpOFF2Re)

According to its self-reported version, Cisco Secure Firewall Threat Defense FTD Software is affected by a vulnerability. - A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an...

Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense

On April 23, 2026, the U.S. Cybersecurity and Infrastructure Security Agency CISA issued an update to V1: Emergency Directive ED 25-03: Identify and Mitigate Potential Compromise of Cisco Devices...

CVE-2026-20039

CVE-2026-20039 affects Cisco Secure Firewall ASA/FTD VPN web server. The root cause is ineffective memory management in the VPN web server, which can be exploited by sending a large flood of crafted HTTP requests, potentially causing the device to reload and suffer a denial-of-service. The affect...

Nord VPN code-related vulnerabilities

Nord VPN is a proxy software developed by the Nord VPN company. Version 6.31.13.0 of Nord VPN contains a code vulnerability. This vulnerability stems from the lack of quotation marks around the nordvpn-service service path, which may allow local attackers to execute code with elevated privileges...

CVE-2022-0517

Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege. This vulnerability affects Mozilla VPN 2.7.1...

CVE-2025-34242 Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxNetworkController.ajaxAction()

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxNetworkController.ajaxAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...

VulnCheck KEV: CVE-2023-5970

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...

EUVD-2020-24800

Malware in sbrugna...

EUVD-2018-1050

Malware in sbrugna...

EUVD-2014-2152

Malware in sbrugna...

EUVD-2018-1173

Malware in sbrugna...

EUVD-2019-0822

Malware in sbrugna...

EUVD-2006-0390

Malware in sbrugna...

EUVD-2020-26392

Malware in sbrugna...

EUVD-2020-24832

Malware in sbrugna...

EUVD-2019-17846

Malware in sbrugna...